Ver código fonte

Increase depth to accomodate intermediate certificates

Bob Mottram 8 anos atrás
pai
commit
8c71dd25f0
1 arquivos alterados com 4 adições e 4 exclusões
  1. 4
    4
      src/freedombone-app-xmpp

+ 4
- 4
src/freedombone-app-xmpp Ver arquivo

@@ -687,7 +687,7 @@ function xmpp_create_config {
687 687
         echo "    certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
688 688
     fi
689 689
     echo "    curve = $XMPP_ECC_CURVE;" >> /etc/prosody/prosody.cfg.lua
690
-    echo '    depth = "1";' >> /etc/prosody/prosody.cfg.lua
690
+    echo '    depth = "2";' >> /etc/prosody/prosody.cfg.lua
691 691
     echo "    ciphers = $XMPP_CIPHERS;" >> /etc/prosody/prosody.cfg.lua
692 692
     echo '    options = { "tlsv1+" };' >> /etc/prosody/prosody.cfg.lua
693 693
     echo "    dhparam = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" >> /etc/prosody/prosody.cfg.lua
@@ -722,7 +722,7 @@ function xmpp_create_config {
722 722
         echo "        certificate = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
723 723
     fi
724 724
     echo "        curve = $XMPP_ECC_CURVE;" >> /etc/prosody/prosody.cfg.lua
725
-    echo '        depth = "1";' >> /etc/prosody/prosody.cfg.lua
725
+    echo '        depth = "2";' >> /etc/prosody/prosody.cfg.lua
726 726
     echo "        ciphers = $XMPP_CIPHERS;" >> /etc/prosody/prosody.cfg.lua
727 727
     echo '        options = { "tlsv1+" };' >> /etc/prosody/prosody.cfg.lua
728 728
     echo "        dhparam = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" >> /etc/prosody/prosody.cfg.lua
@@ -896,8 +896,8 @@ function install_xmpp_main {
896 896
     if ! grep -q 'ciphers =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
897 897
         sed -i "/certificate =/a\        ciphers = $XMPP_CIPHERS;" /etc/prosody/conf.avail/xmpp.cfg.lua
898 898
     fi
899
-    if ! grep -q 'depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua; then
900
-        sed -i '/certificate =/a\        depth = "1";' /etc/prosody/conf.avail/xmpp.cfg.lua
899
+    if ! grep -q 'depth = "2";' /etc/prosody/conf.avail/xmpp.cfg.lua; then
900
+        sed -i '/certificate =/a\        depth = "2";' /etc/prosody/conf.avail/xmpp.cfg.lua
901 901
     fi
902 902
     if ! grep -q 'curve =' /etc/prosody/conf.avail/xmpp.cfg.lua; then
903 903
         sed -i "/certificate =/a\        curve = $XMPP_ECC_CURVE;" /etc/prosody/conf.avail/xmpp.cfg.lua